Senior Cybersecurity engineer
Roles and Responsibilities
Manage Security solutions to protect the Bank’s IT Security Infrastructure from Cyber threats. This includes Intrusion Detection / Prevention systems, Firewalls, Cryptography Systems
Design and implement the security principles for hosting the web applications.
Design, validate, implement and document end-to-end processes workflows on security implementations.
Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
Identify Security gaps, perform threat risk assessments in current setup and propose mitigating measures and react to Cybersecurity resilience.
Undertake new security projects to improve security controls, efficiency, and ease of use without compromising compliance needs.
Review and re-affirm the security controls for the application go-live and enforce them in respective platforms including the virtual environment.
Proficient in handling the web security Zero-day vulnerabilities and must have expert skills in Cyber Security operations.
Must be expert in analysing web security policies / signature-based updates and assess the risk for the Banking applications.
Handle internal customer inquiries with firewall consultation and troubleshoot technical issues effectively.
Communicate with external vendors over technical support and for solutions for new projects.
Proactively identify areas of improvement and implement fixes and solutions to automate / fine-tune the processes with new or existing tools.
Lead incident response activities for detecting and recovering from Cyberattacks.
Perform vulnerability assessments and recommend solutions for security gaps.
Monitor network for suspicious activities and anomalies that emerged as part of Web Application
Monitor and adhere IT Governance principles; controls related to Cybersecurity Architecture.
Requirement
Bachelor’s degree in computer science or equivalent is a must.
At least 10 years of experience in the IT Security domain.
At least 10 years of experience in handling the Cybersecurity Incidents and collaborate with other operational teams.
At least 10 years of experience in Illumio Zero Trust, Checkpoint R81.10, Fortigate Firewalls and must be good in understanding NAC principles
In-depth knowledge of current cyber threats, vulnerabilities, and attack vectors
Proficient in Microsoft office products, Tufin suite, Micro-segmentation, Web application firewalls, IPS / IDS platforms.
Strong fundamental understanding of Internet Security and Critical Controls.
SME in the WAF platforms, especially in the F5 Advanced WAF and VMware AVI NG WAF(MOD Sec).
Guide the engineers on the WAF operational activities, along with handling Network Security Team
Must be good in analysing and reviewing the IPS policies on the Cisco Firepower Threat Defense systems (FTD), Fortiguard and Fortinet security control features.
Expert in handling the zero-day vulnerabilities and mitigate the web-based attacks by custom scripts / iRules.
Act as SPOC for the cyber drill / BAS(Breach & Attack Simulation) activities and co-ordinate with infrastructure teams and report the vulnerabilities for the review.
Analyse the web security events and revival session with the application teams in strengthening the security policies.
Must be good in packet capture analysis and Firewall rule coding principles and Rule compliance.
Proficiency in writing programming/scripting languages (Python, Unix/Linux, etc.) is a plus.
Familiarity with common security frameworks and standards, such as ISO 27001 & NIST and the ability to specify where and how security controls should be applied to or engineered into the
Good working knowledge of Security risk management, Vulnerability management, Application security; Security incident response.
Excellent communication and advocacy skills, both verbal and written, with the ability to express complex technical issues and articulate in a comprehensible manner.
Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.
Morgan McKinley Pte Ltd
Dinu Dinesh
EA License No: 11C5502
EAP Registration No: R22110286
